dnet

Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service #IBMi #AS400 blog.silentsignal.eu/2023/07/03/ibm…

@leyrer obviously the first one, it's an opaque string that should only be manipulated with care

Blanks as part of a password, especially at the start or the end -- "fair enough" or "trim() that bastard"?

Why I don't do modern certification exams? Because I am too old to tolerate BS questions like this one: "Why is AWS more economical than traditional data centers for applications with varying compute workloads?"

IT history #helloween horror

Hot take: if you think my one laptop is going to take down your internet facing production assets from a port scan, just shut down your whole infras now and Ill provide a report with one critical finding. Off hours scanning for internet facing assets is stupid. #infosec

I would have expected this to be in German ...

OH: "Assumption is the mother of all fuckups!"

Configuring Supported TLS Groups in OpenSSL openssl.org/blog/blog/2022… /cc @pfeifferszilard

Wow, cool illusion! The lights are blinking in sync the whole time.

We released a @Burp_Suite extension to scan for CVE-2022-42889, aka. Text4Shell: blog.silentsignal.eu/2022/10/18/our…

There's not going to be an easy answer here folks.

Full stack developer

#PenetrationTesters after a few years in the job

When Patch Tuesday comes around

Cybersecurity Awareness Month Tip #10: Be cautious when drinking from data streams in the cyber wilderness. While it may look clear and tasty, there could be contaminants you cannot see or smell. APTs will exploit this desire through upstream attacks, polluting the supply.

OH: "One would think so much practicing security would eventually yield some skill."

Industry lawyers (@bakermckenzie) now even give lectures on "how to fight data subjects complaints", with a special feature on @noybeu and many procedural "tricks" like simply complying with the #GDPR only once you have a complaint filed ("Nacherfüllung"), use the short...

The @FT's 404 page still sets the benchmark😂